Update member

curl --request PUT \
  --url https://int-api.mx.com/users/{user_identifier}/members/{member_identifier} \
  --header 'Accept-Version: <accept-version>' \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "member": {
    "background_aggregation_is_disabled": false,
    "credentials": [
      {
        "guid": "CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f",
        "value": "password"
      }
    ],
    "id": "unique_id",
    "metadata": "\\\"credentials_last_refreshed_at\\\": \\\"2015-10-15\\",
    "skip_aggregation": false,
    "use_cases": [
      "PFM"
    ]
  }
}
'

import requests

url = "https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}"

payload = { "member": {
        "background_aggregation_is_disabled": False,
        "credentials": [
            {
                "guid": "CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f",
                "value": "password"
            }
        ],
        "id": "unique_id",
        "metadata": "\\"credentials_last_refreshed_at\\": \\"2015-10-15\",
        "skip_aggregation": False,
        "use_cases": ["PFM"]
    } }
headers = {
    "Accept-Version": "<accept-version>",
    "Authorization": "Basic <encoded-value>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {
    'Accept-Version': '<accept-version>',
    Authorization: 'Basic <encoded-value>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    member: {
      background_aggregation_is_disabled: false,
      credentials: [{guid: 'CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f', value: 'password'}],
      id: 'unique_id',
      metadata: '\"credentials_last_refreshed_at\": \"2015-10-15\',
      skip_aggregation: false,
      use_cases: ['PFM']
    }
  })
};

fetch('https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_POSTFIELDS => json_encode([
    'member' => [
        'background_aggregation_is_disabled' => false,
        'credentials' => [
                [
                                'guid' => 'CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f',
                                'value' => 'password'
                ]
        ],
        'id' => 'unique_id',
        'metadata' => '\\"credentials_last_refreshed_at\\": \\"2015-10-15\\',
        'skip_aggregation' => false,
        'use_cases' => [
                'PFM'
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Accept-Version: <accept-version>",
    "Authorization: Basic <encoded-value>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}"

	payload := strings.NewReader("{\n  \"member\": {\n    \"background_aggregation_is_disabled\": false,\n    \"credentials\": [\n      {\n        \"guid\": \"CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f\",\n        \"value\": \"password\"\n      }\n    ],\n    \"id\": \"unique_id\",\n    \"metadata\": \"\\\\\\\"credentials_last_refreshed_at\\\\\\\": \\\\\\\"2015-10-15\\\\\",\n    \"skip_aggregation\": false,\n    \"use_cases\": [\n      \"PFM\"\n    ]\n  }\n}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("Accept-Version", "<accept-version>")
	req.Header.Add("Authorization", "Basic <encoded-value>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.put("https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}")
  .header("Accept-Version", "<accept-version>")
  .header("Authorization", "Basic <encoded-value>")
  .header("Content-Type", "application/json")
  .body("{\n  \"member\": {\n    \"background_aggregation_is_disabled\": false,\n    \"credentials\": [\n      {\n        \"guid\": \"CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f\",\n        \"value\": \"password\"\n      }\n    ],\n    \"id\": \"unique_id\",\n    \"metadata\": \"\\\\\\\"credentials_last_refreshed_at\\\\\\\": \\\\\\\"2015-10-15\\\\\",\n    \"skip_aggregation\": false,\n    \"use_cases\": [\n      \"PFM\"\n    ]\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Accept-Version"] = '<accept-version>'
request["Authorization"] = 'Basic <encoded-value>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"member\": {\n    \"background_aggregation_is_disabled\": false,\n    \"credentials\": [\n      {\n        \"guid\": \"CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f\",\n        \"value\": \"password\"\n      }\n    ],\n    \"id\": \"unique_id\",\n    \"metadata\": \"\\\\\\\"credentials_last_refreshed_at\\\\\\\": \\\\\\\"2015-10-15\\\\\",\n    \"skip_aggregation\": false,\n    \"use_cases\": [\n      \"PFM\"\n    ]\n  }\n}"

response = http.request(request)
puts response.read_body

{
  "member": {
    "aggregated_at": "2016-10-13T18:07:57.000Z",
    "background_aggregation_is_disabled": false,
    "connection_status": "CONNECTED",
    "connection_status_message": "Connected to MX Bank",
    "error": {},
    "guid": "MBR-7c6f361b-e582-15b6-60c0-358f12466b4b",
    "id": "unique_id",
    "institution_code": "mxbank",
    "institution_guid": "INS-12345678-90ab-cdef-1234-567890abcdef",
    "is_being_aggregated": false,
    "is_managed_by_user": false,
    "is_manual": false,
    "is_oauth": false,
    "metadata": "\\\"credentials_last_refreshed_at\\\": \\\"2015-10-15\\",
    "most_recent_job_detail_code": null,
    "most_recent_job_detail_text": null,
    "most_recent_job_guid": "JOB-12345678-90ab-cdef-1234-567890abcdef",
    "name": "MX Bank",
    "needs_updated_credentials": false,
    "oauth_window_uri": "https://mxbank.mx.com/oauth/authorize?client_id=b8OikQ4Ep3NuSUrQ13DdvFuwpNx-qqoAsJDVAQCyLkQ&redirect_uri=https%3A%2F%2Fint-app.moneydesktop.com%2Foauth%2Fredirect_from&response_type=code&scope=openid&state=d745bd4ee6f0f9c184757f574bcc2df2",
    "successfully_aggregated_at": "2016-10-13T17:57:38.000Z",
    "use_cases": [
      "PFM"
    ],
    "user_guid": "USR-fa7537f3-48aa-a683-a02a-b18940482f54",
    "user_id": "u-1234"
  }
}

PUT

users

{user_identifier}

members

{member_identifier}

Update member

curl --request PUT \
  --url https://int-api.mx.com/users/{user_identifier}/members/{member_identifier} \
  --header 'Accept-Version: <accept-version>' \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "member": {
    "background_aggregation_is_disabled": false,
    "credentials": [
      {
        "guid": "CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f",
        "value": "password"
      }
    ],
    "id": "unique_id",
    "metadata": "\\\"credentials_last_refreshed_at\\\": \\\"2015-10-15\\",
    "skip_aggregation": false,
    "use_cases": [
      "PFM"
    ]
  }
}
'

import requests

url = "https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}"

payload = { "member": {
        "background_aggregation_is_disabled": False,
        "credentials": [
            {
                "guid": "CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f",
                "value": "password"
            }
        ],
        "id": "unique_id",
        "metadata": "\\"credentials_last_refreshed_at\\": \\"2015-10-15\",
        "skip_aggregation": False,
        "use_cases": ["PFM"]
    } }
headers = {
    "Accept-Version": "<accept-version>",
    "Authorization": "Basic <encoded-value>",
    "Content-Type": "application/json"
}

response = requests.put(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'PUT',
  headers: {
    'Accept-Version': '<accept-version>',
    Authorization: 'Basic <encoded-value>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    member: {
      background_aggregation_is_disabled: false,
      credentials: [{guid: 'CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f', value: 'password'}],
      id: 'unique_id',
      metadata: '\"credentials_last_refreshed_at\": \"2015-10-15\',
      skip_aggregation: false,
      use_cases: ['PFM']
    }
  })
};

fetch('https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "PUT",
  CURLOPT_POSTFIELDS => json_encode([
    'member' => [
        'background_aggregation_is_disabled' => false,
        'credentials' => [
                [
                                'guid' => 'CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f',
                                'value' => 'password'
                ]
        ],
        'id' => 'unique_id',
        'metadata' => '\\"credentials_last_refreshed_at\\": \\"2015-10-15\\',
        'skip_aggregation' => false,
        'use_cases' => [
                'PFM'
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Accept-Version: <accept-version>",
    "Authorization: Basic <encoded-value>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}"

	payload := strings.NewReader("{\n  \"member\": {\n    \"background_aggregation_is_disabled\": false,\n    \"credentials\": [\n      {\n        \"guid\": \"CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f\",\n        \"value\": \"password\"\n      }\n    ],\n    \"id\": \"unique_id\",\n    \"metadata\": \"\\\\\\\"credentials_last_refreshed_at\\\\\\\": \\\\\\\"2015-10-15\\\\\",\n    \"skip_aggregation\": false,\n    \"use_cases\": [\n      \"PFM\"\n    ]\n  }\n}")

	req, _ := http.NewRequest("PUT", url, payload)

	req.Header.Add("Accept-Version", "<accept-version>")
	req.Header.Add("Authorization", "Basic <encoded-value>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.put("https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}")
  .header("Accept-Version", "<accept-version>")
  .header("Authorization", "Basic <encoded-value>")
  .header("Content-Type", "application/json")
  .body("{\n  \"member\": {\n    \"background_aggregation_is_disabled\": false,\n    \"credentials\": [\n      {\n        \"guid\": \"CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f\",\n        \"value\": \"password\"\n      }\n    ],\n    \"id\": \"unique_id\",\n    \"metadata\": \"\\\\\\\"credentials_last_refreshed_at\\\\\\\": \\\\\\\"2015-10-15\\\\\",\n    \"skip_aggregation\": false,\n    \"use_cases\": [\n      \"PFM\"\n    ]\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://int-api.mx.com/users/{user_identifier}/members/{member_identifier}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Put.new(url)
request["Accept-Version"] = '<accept-version>'
request["Authorization"] = 'Basic <encoded-value>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"member\": {\n    \"background_aggregation_is_disabled\": false,\n    \"credentials\": [\n      {\n        \"guid\": \"CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f\",\n        \"value\": \"password\"\n      }\n    ],\n    \"id\": \"unique_id\",\n    \"metadata\": \"\\\\\\\"credentials_last_refreshed_at\\\\\\\": \\\\\\\"2015-10-15\\\\\",\n    \"skip_aggregation\": false,\n    \"use_cases\": [\n      \"PFM\"\n    ]\n  }\n}"

response = http.request(request)
puts response.read_body

{
  "member": {
    "aggregated_at": "2016-10-13T18:07:57.000Z",
    "background_aggregation_is_disabled": false,
    "connection_status": "CONNECTED",
    "connection_status_message": "Connected to MX Bank",
    "error": {},
    "guid": "MBR-7c6f361b-e582-15b6-60c0-358f12466b4b",
    "id": "unique_id",
    "institution_code": "mxbank",
    "institution_guid": "INS-12345678-90ab-cdef-1234-567890abcdef",
    "is_being_aggregated": false,
    "is_managed_by_user": false,
    "is_manual": false,
    "is_oauth": false,
    "metadata": "\\\"credentials_last_refreshed_at\\\": \\\"2015-10-15\\",
    "most_recent_job_detail_code": null,
    "most_recent_job_detail_text": null,
    "most_recent_job_guid": "JOB-12345678-90ab-cdef-1234-567890abcdef",
    "name": "MX Bank",
    "needs_updated_credentials": false,
    "oauth_window_uri": "https://mxbank.mx.com/oauth/authorize?client_id=b8OikQ4Ep3NuSUrQ13DdvFuwpNx-qqoAsJDVAQCyLkQ&redirect_uri=https%3A%2F%2Fint-app.moneydesktop.com%2Foauth%2Fredirect_from&response_type=code&scope=openid&state=d745bd4ee6f0f9c184757f574bcc2df2",
    "successfully_aggregated_at": "2016-10-13T17:57:38.000Z",
    "use_cases": [
      "PFM"
    ],
    "user_guid": "USR-fa7537f3-48aa-a683-a02a-b18940482f54",
    "user_id": "u-1234"
  }
}

Use this endpoint to update a members attributes. Only the credentials, id, and metadata parameters can be updated. To get a list of the required credentials for the member, use the list member credentials endpoint.

Authorizations

Authorization

string

header

required

To authenticate with the Platform API, include your Base64-encoded client_id and api_key in the Authorization header of every request: -H 'Authorization: Basic BASE_64_ENCODING_OF{client_id:api_key}'

Headers

Accept-Version

string

default:v20250224

required

MX Platform API version.

Example:

"v20250224"

X-CALLBACK-PAYLOAD

string

The base64 encoded string defined in this header will be returned in the Member and Member Data Updated webhooks. This allows you to trace user interactions and workflows initiated externally and internally in the MX Platform. Max 1024 characters.

Path Parameters

member_identifier

string

required

Use either the member id you defined or the MX-defined member guid. See MX-Defined GUIDs vs IDs Defined by You.

user_identifier

string

required

Use either the user id you defined or the MX-defined user guid. See MX-Defined GUIDs vs IDs Defined by You.

Body

application/json

Member object to be updated (While no single parameter is required, the request body can't be empty)

member

object

Hide child attributes

member.background_aggregation_is_disabled

boolean

Indicates whether background aggregation is disabled for the member.

Example:

false

member.credentials

object[]

Hide child attributes

member.credentials.guid

string

Example:

"CRD-27d0edb8-1d50-5b90-bcbc-be270ca42b9f"

member.credentials.value

string

Example:

"password"

member.id

string

The unique partner-defined identifier for the member.

Example:

"unique_id"

member.metadata

string

Additional information you can store about the member.

Example:

"\\\"credentials_last_refreshed_at\\\": \\\"2015-10-15\\"

member.skip_aggregation

boolean

deprecated

(Deprecated) This field remains supported in this version but will be removed at a future date.

This indicates whether to skip the automatic aggregation that normally occurs when a member is created.

Example:

false

member.use_cases

enum<string>[]

The use case associated with the member. Valid values are PFM and/or MONEY_MOVEMENT. Only set this if you've met with MX and have opted in to using this field.

Available options:

MONEY_MOVEMENT,

PFM

Example:

["PFM"]

Response

200 - application/json

member

object

Hide child attributes

member.aggregated_at

string | null

The date and time the most recent aggregation-type job was started, given in ISO 8601 format with a time component.

A job will automatically be started when a member is created or its credentials are updated, unless the skip_aggregation parameter is used.

Jobs can also be started via manual aggregations, background aggregations, API endpoints, or when opening an MX widget.

A job can be a normal aggregation, or a premium job such as identification, verification, fetching statements, or fetching an extended transaction history.

If a member is deleted and then re-created with the skip_aggregation parameter set to true or if it is re-created within the throttle window (typically three hours), the previous value will be returned.

Example:

"2016-10-13T18:07:57.000Z"

member.background_aggregation_is_disabled

boolean

Indicates whether background aggregation is disabled for the member.

Example:

false

member.connection_status

enum<string> | null

The status of a user's connection to an institution. See Member Connection Status.

Available options:

CREATED,

PREVENTED,

DENIED,

CHALLENGED,

REJECTED,

LOCKED,

CONNECTED,

IMPEDED,

RECONNECTED,

DEGRADED,

DISCONNECTED,

DISCONTINUED,

CLOSED,

DELAYED,

FAILED,

UPDATED,

DISABLED,

IMPORTED,

RESUMED,

EXPIRED,

IMPAIRED,

PENDING

Example:

"CONNECTED"

member.connection_status_message

string | null

A human-readable message describing the connection status. See Member Connection Status.

Example:

"Connected to MX Bank"

member.error

object | null

member.guid

string | null

The unique identifier for the member. Defined by MX.

Example:

"MBR-7c6f361b-e582-15b6-60c0-358f12466b4b"

member.id

string | null

The unique partner-defined identifier for the member.

Example:

"unique_id"

member.institution_code

string | null

The code identifying a financial institution.

Example:

"mxbank"

member.institution_guid

string

The unique identifier for the institution. Defined by MX.

Example:

"INS-12345678-90ab-cdef-1234-567890abcdef"

member.is_being_aggregated

boolean | null

Indicates whether the member was being aggregated at the time of the request.

Example:

false

member.is_managed_by_user

boolean | null

Indicates whether the member is managed by the user or the MX partner. Members created with the managed member feature will have this field set to false.

Example:

false

member.is_manual

boolean | null

Indicates whether the transaction was manually created or belongs to a manual account.

Example:

false

member.is_oauth

boolean | null

Indicates whether the member uses OAuth to authenticate. Defaults to false.

Example:

false

member.metadata

string | null

Additional information you stored about the member.

Example:

"\\\"credentials_last_refreshed_at\\\": \\\"2015-10-15\\"

member.most_recent_job_detail_code

integer | null

(Deprecated) This field is no longer used and will be removed at a future date.

Example:

null

member.most_recent_job_detail_text

boolean | null

(Deprecated) This field is no longer used and will be removed at a future date.

Example:

null

member.most_recent_job_guid

string | null

The unique identifier for the most recent job. Defined by MX.

Example:

"JOB-12345678-90ab-cdef-1234-567890abcdef"

member.name

string | null

The name of the member.

Example:

"MX Bank"

member.needs_updated_credentials

boolean | null

Internal field used by MX in some circumstances. When set to true, MX will not attempt to aggregate the member. It will be set to false automatically when the member's credentials are updated.

Example:

false

member.oauth_window_uri

string | null

When connecting a member using OAuth, this field will contain the URL to send the user to in order to authenticate, otherwise it will be blank.

Example:

"https://mxbank.mx.com/oauth/authorize?client_id=b8OikQ4Ep3NuSUrQ13DdvFuwpNx-qqoAsJDVAQCyLkQ&redirect_uri=https%3A%2F%2Fint-app.moneydesktop.com%2Foauth%2Fredirect_from&response_type=code&scope=openid&state=d745bd4ee6f0f9c184757f574bcc2df2"

member.successfully_aggregated_at

string | null

The date and time when the member was last successfully aggregated, represented in ISO 8601 format with a timestamp.

Example:

"2016-10-13T17:57:38.000Z"

member.use_cases

enum<string>[]

The use case associated with the member. Valid values are PFM and/or MONEY_MOVEMENT. Only set this if you've met with MX and have opted in to using this field.

Available options:

MONEY_MOVEMENT,

PFM

Example:

["PFM"]

member.user_guid

string | null

The unique identifier for the user. Defined by MX.

Example:

"USR-fa7537f3-48aa-a683-a02a-b18940482f54"

member.user_id

string | null

The unique partner-defined identifier for the user.

Example:

"u-1234"